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(57) Abstract 

A method of and system for secure communication usmg signature verification. A message sender transmits to a trusted server a set 
of biometric data, such as representing the sender's handwritten signature, and a set of information about a message, such as a message 
identifier. The server verifies the sender's signature against a signature feature vector database, and provides the sender with a key for 
securely encoding the message. The sender encodes the message and transmits it to a message receiver. The receiver transmits to the 
server a second set of biometric data, such as representing the receiver's handwritten signature. The server verifies the receiver's signature 
against the signature feature vector database, and provides the receiver with the message identifier and a key for decoding the message. 
Hie biometric data represents a handwritten signature given contemporaneously by Che sender or receiver, and is verified against a set of 
template signatures earlier given by the sender and receiver and recorded by the server, or may represent fingerprints, voiceprints, retinal 
images, other biometric data, or any art)itrary data which is particular to the sender or receiver and which ttie server is capable of verifying. 
Hie message comprises a single set of binary or text data, such as a file, or the message may comprise a stream of data and the method may 
be used for a virtual circuit to be created between the sender and receiver. The server may enhance the communication channel between 
the sender and the receiver, for example by transmitting signals to the sender representing whetiier the message was received. 
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Method of Secure Communication Using Signature Veiiiication 
Background of the Invention 

5 1 . Field of the Invention 

This invention relates to a method of secure communication using signature 

verificadon. 

2 . Description of Related Art 

In some environments, communicating messages is brought with the risk that 
1 0 unauthorized persons may intercept the messages and read them, or may insert counterfeit 

messages into the message stream. Various methods have been proposed for communication in 
such environments; tiiese various methods generally require message encryption and secure 
distribution of encryption keys. 

In environments where communicating users are mobile, one problem which 
15 has arisen in the art is the difficulty of easily and quickly authenticating the identities of users. 
One known solution is to provide each user with a password or other key, and to require the 
user to enter that password for authentication. However, dus known method is subject to 
several drawbacks. First, the password may be forgotten or otherwise lost This would 
require the user to obtain a new password or otherwise obtain authentication using another 
20 channel. 

Second, the password (or some transformation thereof) must be transmitted 
fix>m the usefs new position to some entity for authentication. This creates a point of attack for 
unauthorized persons to identify the password or its transformation and copy that information 
for their own use. Once a password has been compromised, it is easy for an unauthorized 
25 person to enter that password and obtain improper audientication. 

Ihird, the password may simply be guessed by imauthorized persons, 
particulariy those who are familiar with the user. 

Accordingly, it would be advantageous to provide a system in which users may 
easily and quickly authenticate their identities and communicate widi other users, and in which it 
30 is difficult for authentication means (1) to become lost, (2) to be copied by unauthorized 
persons, or (3) to be guessed by unauthorized persons. 
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Summary of the Invention 

The invention provides a method of and system for secure communication 
using signature verification. A message sender transmits to a trusted server a set of biometric 
daia, such as representing the sender's handwritten signature, and a set of information about a 
5 message, such as a message identifier. The server verifies the sender's signature against a 
signature feature vector database, and provides the sender with a key for securely encoding the 
message. The sender encodes the message and transmits it to a message receiver. The receiver 
transmits to the server a second set of biometric data, such as representing the receiver's 
handwritten signature. The server verifies the receiver's signature against the signature feature 
1 0 vector database, and provides the receiver with the message identifier and a key for decoding 
the message. 

In a preferred embodimrat, the biometric data represents a handwritten signature 
given contemporaneously by the sender or receiver, and is verified against a set of template 
signatures earUer given by the sender and receiver and recorded by the server. However, in 
1 5 alternative embodiments, the biometric data may represent facial images, fingerprints, hand 
images or handprints, foot images or footprints, human genome data, retinal images, 
voiceprints, recorded spoken statements, or other biometric data, or any arbitrary data which is 
particular to the sender or receiver and which the server is capable of verifying. 

In a preferred embodimrat, the message comprises a single set of binary or text 
20 data, such as a file. However, in altmiative embodiments, the message may comprise a stream 
of data and the method may be used for a virtual circuit to be created between the sender and 
receiver. In other alternative embodiments, the server may enhance the communication channel 
between the sender and the receiver, for example by transmitting signals to the sender 
representing whether the message was received, and if so, when. 

25 Brief Description of the Drawings 

Figure 1 shows a block diagram pf a system for secure communication using 
signature verification. 

Figure 2 shows a flow diagram of a method of secure communication using 
signature verification using an arrangement as shown in figure 1. 
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Description of the Preferred Embodiment 



In the following description, a preferred embodiment of the invention is 
described with regard to preferred process steps and data structures. However, tiiose skilled m 
the art would recognize, after perusal of this appKcation, that embodiments of the invention may 
5 be implemented using a set of general puipose computers operating under program control, and 
that modification of a set of general purpose computers to implement die process steps and data 
structures described herein would not require undue invention. 

Secure Communication Using Signature Verification 

Figure 1 shows a block diagram of a system for secure communication using 
signature verification. 

A system 100 for secure communication comprises a server 1 10, a message 
sender 120, a first communication patii 131 between tiie server 1 10 and tiie sender 120, a 
niessage receiver 140, a second communication path 132 between tiie server 1 10 and flie 
lecdver 140, and a third communication pafli 133 between die sender 120 and die receiver 140. 

In a preferred embodiment, the first communication path 131, the second 
communication path 132, and die tiiird communication path 133 comprise communication patiis 
in a network 130 such as a local area networic Q^AN), a wide area network (WAN), or a 
networic of networks (an "internet"), Preferably, die first communication patii 131, die second 
communication pafli 132, and die tiiird communication patii 133 comprise dynamically routed 
communication patiis constructed using network media, routers, and otiier intermediate 
processors in an internet However, in alternative embodiments, tiie first communication patii 
131, tiie second communication patii 132, and tiie tiiird communication patfi 133 may comprise 
telephone connections in a telephone network, coupled between telephones at die servw 110, 
tiie sender 120, and the receiver 140. 

The server 110 comprises a database 1 1 1 of autiientication information. The 
database 1 1 1 is preferably stored using a mass storage device such as magnetic disk, optical 
disk, or magnetic tape, but may alternatively be stored using any technique which allows for 
storage and retrieval of biometric informatiorL 

In a preferred embodiment, the database 111 comprises a set of signature feature 
vectors 1 12 such as tiiose described witii a method of signature verification shown in the 
following disclosures: 
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o Application Serial No. 08/169,654, filed December 17, 1993, in the name of inventors 
Ali M ohamed Moussa and Chih Chan, tided '*Method for Automatic Signature Verification", 
assigned to the same assignee, and having attorney docket number ACS-OOl ; and 

0 Application Serial No. 08/483,942, filed June 7, 1995, in the name of inventors Ali 
Mohamed Moussa and Oiih Oian, titled "Mediod for Automatic Signature Verification", 
assigned to the same assignee, and having attorney docket number ACS-002. 

Each of these applications is hereby incorporated by reference as if fully set forth 
herein. There are collectively referred to herein as the Signature Verification Disclosures. 

However, in alternative embodiments, the database 1 1 1 may comprise 
alternative sets of biometric data or other data for validating signatures from the sender 120 or 
the leceivCT 140. For example, such biometric data may comprise all or a selected part of, or an 
encoding of, a set of biometric information about a person, which biometric information may 
comprise a facial image, a fingerprint, a hand image or handprint, a foot image or foo^)rint, a 
human genome or related genetic inf oraiation, a retinal image, a voiceprint or other record of a 
spoken statement, or alternatively any other biometric information which is substantially unique 
to a first selected individual and difficult to adapt to a second selected individual. Biometric 
information differs from memorized information such as a password. Authentication using 
biometric information differs from physical forms of authentication such as using a pass key. 

The server 1 10 also comprises a processor 113 operating under software 
program control for performing the functions described herein, having memory for storing 
software programs and data, and having mass storage for storing all or part of die database 111. 

The processor 1 13 includes a verifier 1 14 for operating on the database 1 1 1 and 
on signature feature vectors 1 12 received fix)m tiie sender 120 or tiie receiver 140. In a 
preferred embodiment, die verifier 114 performs the method of signature verification shown in 
die Signature Verification Disclosures. However, in alternative embodiments, the verifier 1 14 
may perform another method of signature vaification or verification of other biometric data. 

The sender 120 comprises a pen tablet 121 for receiving a signature from the 
smding person. In a preferred embodiment, tiie pen tablet 121 comprises one like tiiat shown 
in the Signature Verification Disclosures. 

The sender 120 also comprises a processor 122 coupled to the pen tablet 121, 
operating under software program control for performing tiie functions described herein, having 
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memory for storing software programs and data, and for storing a signature feature vector 1 12 
constructed for the sending person, and having mass storage for storing messages to be sent 



The receiver 140 comprises a pen tablet 141 for receiving a signature from the 
receiving person. In a prefened embodiment, the pen tablet 141 is similar to the pen tablet 121, 
and comprises one like thai shown m the Signature Verification Disclosures. 

The receiver 140 also comprises a processor 142 coupled to the pen tablet 141, 
operating under software program control for performing the functions described h^ein, having 
memory for storing software programs and dau, and for storing a signature feature vector 112 
constructed for the receiving person, and having mass storage for storing received messages. 

The server 1 10, the sender 120, and the receiver 140 collectively perform the 
method shown herein. 

Method Of Secure Communication 

Figure 2 shows a flow diagram of a method of secure communication using 
signature verification using an arrang^ent as shown in figure 1, 

At a flow point 200, the sender 120 desires to send a message to the leceivo* 

140. 

At a step 210, the sender 120 registers a set of signature feature vectors 1 12 for 
the sending person, using the first communication path 13 1 (between flie server 1 10 and the 
sender 120). To perform this step 210, the sender 120 performs the step 211 through the step 
213. 

At a step 21 1, the sender 120 collects a set of template signatures from the 
sending person using the pen tablet 121. 

At a step 212, the sender 120 forms a set of signature feature vectors 1 12 for the 
template signatures for the sending person, using the processor 122. The sender 120 preferably 
performs methods shown in the Signature Verification Disclosures. 

At a step 2 13, the sender 120 transmits the set of signature feature vectors 1 12 
for the template signatures for the sending person to the server 1 10, using die first 
communication path 131. In a preferred embodiment, it is not necessary that the first 
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communication path 131 is secure against reading by unauthorized third parties, only that the 
first communication path 131 is secure against unauthorized third parties altering the set of 
signature feature vectors 1 12 without detection. 

Once the signature feature vectors 1 12 for the template signatures for the sending 
person are registered at the server 1 10, the sending person may use the sender 120 to transmit a 
message. Although in a prefmed embodiment, the signature feature vectors 112 for the 
template signatures for the sending person are transmitted from the saider 120 to the server 
1 10, in alternative embodiments the sending person may deliver their signature feature vectors 
1 12 by other means. For example, tiie sending person may alternatively use a different physical 
device in place of the sender 120 for transmitting signature feature vectors 1 12 for their template 
signatures to the server 1 10, or may use the server 1 10 direcfly for entering their template 
signatures and forming signature feature vectors 112 therefor. 

At a step 220, the sender 120 verifies a new signature from the sending person. 
To perform tiiis step 220, tiie server 1 10 and sender 120 perform tiie step 221, die step 222, 
and the step 223. 

At a step 221, the sender 120 collects a test signature from the sending person 
using the pen tablet 121. 

At a step 222, the sender 120 forms a signature feature vector 1 12 for the test 
signature for the sending person. The sender 120 preferably performs metiiods shown in the 
Signature Verification Disclosures. 

At a step 223, the server 1 10 receives the signature feature vector 1 12 for the test 
signature for the sending person, and attempts to verify that test signatuie against the set of 
signature feature vectors 112 template signature for the sending person, using the processor 
113. The server 110 preferably performs methods shown in the Signature Verification 
Disclosures. 

If flie attempt to verify is successful (le., the test signature is considered to 
match the template signatures), die server 1 10 proceeds with the step 230. If the attempt to 
verify is unsuccessful (i.e., the test signature is considered to not match the template 
signatures), the server 1 10 transmits a message so indicating to die sender 120. 

In a preferred embodiment, if the attempt to verify is unsuccessful, the server 
1 10 and the sender 120 may conduct a set of reattempts to verify the sending person, such as by 
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xeguesdng an additional test signature and repeating the step 221, the step 222, and the step 
223. Alternatively, the server 1 10 and the sender 120 may attempt to verify the sending person 
by other means, such as by using other biometric data, by using memorized data such as a 
password, or by using physical authentication such as requiring pass key from the sending 
5 person. 

In a preferred embodiment* methods shown in the Signature Verification 
Disclosures are adapted to provide one of three alternative results from the attempt to verify the 
test signature ~ (1) the test signature is considered to match the template signatures, (2) the test 
signanire is considered to not match the template signatures, or (3) the result of the attempt to 
1 0 verify is considered ambiguous. In the event of die third alternative result, the server 1 10 and 
the sender 120 may conduct a supplemental atiempt to authenticate the sending person, such as 
by requesting additional test signatures, by using other biometric data, by using memorized data 
such as a password, or by using physical authratication such as requiring pass key from the 
sending person. 

15 At a step 230, the server 1 10 transmits to the sender 120 a key for encoding the 

message to be transmitted from die sender 120 to the receiver 140. 

In a preferred embodiment, the key for encoding comprises a key for a 
symmetric encoding/decoding method such as the Data Encryption Standard (DBS). 

However, in alternative embodiments, the key for encoding may comprise a 
20 first key from a key pair used in a public key system. 

At a step 240, the sender 120 encodes the message using the key for encoding, 
to generate an encoded message. 

At a step 250, die sender 120 transmits the encoded message to the receiver 140 
using the third communication path 133. 

25 At a step 260, the receiver 140 rcgistras a set of signature feature vectors 112 for 

the receiving person, using the second communication path 132 0)etween the server 1 10 and die 
receiver 140). To perform this step 260, the recdver 140 perfonns steps like the step 211 
through the step 213. The receiver 140 collects a set of template signatures from the receiving 
person using the pen tablet 141. The receiver 140 forms a set of signature feature vectors 1 12 

30 for the template signatures for the sending person, using the processor 142. The receiver 140 
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transmits the set of signaturc feature vectors 1 12 for the template signatures for the receiving 
person to the server 1 10, using the second communication path 132. 



As was the case for the sending person, once the signature feature vectors 1 12 
for the template signatures for the receiving person are registered at the server 1 10, the receiving 
5 person may use the receive 140 to receive a message. Although in a prefened embodiment, the 
signature feature vectors 1 12 for the template signatures for the receiving person are transmitted 
from the receiver 140 to the server 1 10, in alternative embodiments the receiving person may 
deliver their signature feature vectors 1 12 by other means similar to those shown herein for the 
sending person. 

10 In addition, it is not necessary for the signature feature vectors 1 12 for the 

template signatures for the receiving person to be registered at the server 1 10, if they have 
aheady been registered at the server 1 10 for the same person as a sending person. Once an 
individual is registered at the server 1 10 in one capiacity, the server 1 10 will retrieve their 
signature feature vectors 1 12 when they use the server 1 10 in another capacity. 

15 At a step 270, the receiver 140 verifies a new signature from the receiving 

person. To perform this step 270, the receiver 140 performs steps like the step 221 through the 
step 223. The receiver 140 collects a test signature from the receiving person using the pen 
tablet 141. The receiver 140 forms a signature feature vector 1 12 for the test signaturc for the 
receiving person. Tlie server 1 10 recdves the signature feature vector 1 12 for the test signaturc 

20 for the receivmg person, and attempts to verify that test signature against the set of signature 
feature vectors 1 12 template signature for the receiving person, using the processor 1 13. 

If the attempt to verify is successful (i.e., the test signature is considered to 
match the template signatures), the server 1 10 proceeds with the step 280. If the attempt to 
verify is unsuccessful (i.e., the test signaturc is considered to not match the template 
25 signatures), the server 1 10 transmits a message so indicating to die receiver 140. If the attempt 
to verify is unsuccessful, die server 1 10 and the receiver 140 may conduct a set of reattempts to 
verify the receiving person, similar to processmg in die step 223 for die sending person. 

At a step 280, the server 1 10 transmits to the receiver 140 a key for decoding the 
encoded message that was transmitted from the sender 120 to the receiver 140. 

30 In a preferred embodiment, the key for decoding comprises the same key as 

the key for encoding, for use in a symmetric encoding/decoding method such as the Data 
Enayption Standard (DES). 

8 

SUBSTITUTE SHEET (RULE 26) 

WEST 



wo 97/08868 PCT/US96/13736 

However, in alternative embodiments, the key for decoding may comprise a 
second key from a key pair used in a public key system, and corresponding to the k^ pair from 
which the key for encoding was selected. 

In a piefoied embodiment* server 1 10 generates a signal to the sender 120, 
5 indicating that the receiver 140 has received the key for decoding, and therefore that biometric 
data for the receiving person has been verified. The server 110 transmits this signal to the 
sender 120 using the first communication path 13L This signal provides the sender 120 with 
an indication that Ae receiver 140 has received the message. Preferably, the signal provides an 
identifier for the message (so as to distinguish between several messages transmitted fi*om the 
1 0 sender 120 to the receiver 140) and a timestamp value representative of when the key for 
decoding was transmitted from the server 1 10 to the receiver 140. 

At a step 290, the receiver 140 decodes the encoded message using the key 
for decoding, to recover the original message. 

Jn a preferred embodiment, the message comprises a single set of binary or 
1 5 text data, such as a file being transferred using a file transfer protocol or other netwoik 
protocol To generate the encoded message, the entire file is encoded using the key for 
encoding in a block encoding technique, thus creating an encoded file. The encoded file is 
transferred using the file transfer protocol or other network protocol. To recover the original 
message, the entire encoded file is decoded using the key for decoding. 

20 However* in alternative embodimmts, the message may comprise a stream of 

data and the method may be used for a virtual circuit to be created between the sender and 
receiver. To generate the encoded message, each separate transmission is encoded using the 
key for encoding in a stream encoding technique, thus creating an encoded stream of 
transmissions from the sender 120 to the receiver 140. The encoded stream is transferred using 

25 a "telnet" protocol or other stream communication protocol. To recover the original stream of 
transmissions, the encoded stream is decoded using the key for decoding. 

The receiver 140 may generate a response message to be transmitted to the 
sender 120. In this event, the receiver 140 may obtain a new key for encoding from the server 
110, using the method described with regard to figure 2. Alternatively, since the receiver 120 
30 has obtained fcom the server 1 10 a verification of the biometric data for the receiving person, 
the method may be streamlined for response messages fi*om the receiver 140 to the sender 120. 
The server 1 10 may simply generate a key for encoding the response message and transmit that 
key for encoding to the receiver 140, and generate a key for decoding the response message and 
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transmit that key for decoding to the sender 120. In a preferred embodiment where the key for 
encoding and die key for decoding the original message are substantially identical, the receiver 
140 may use the key for decoding the original message as a key for encoding the response 
message and the sender 120 may use the key for encoding the original message as a key for 
decoding the response message. 

Alternative Embodiments 

Although preferred embodiments are disclosed herein, many variations are 
possible which remain within the concept, scope, and spirit of the invention, and these 
variations would become clear to those skilled in the art after perusal of this application. 
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Claims 

Wedaim: 

1 . A method for communication betwera a sender and a receiver, said 
method comprising 

5 transmitting from said sender to a serv^ a set of biometric data for a sending 

p^son; 

verifying, at said server, said biometric data for said sending person; 
transmitting from said server to said sender a key for encoding said message; 
encoding a message using said key for encoding to generate an encoded 

1 0 message; 

transmitting said encoded message to said receiver; 

transmitting from said receiver to said server a set of biometric data for a 
receiving person; 

verifying, at said server, said biometric data for a receiving person; 
"1 5 transmitting from said server to said receiver a key for decoding said encoded 

message; and 

decoding said encoded message at said receiver. 

2 . A method as in claim I , comprising 

encoding a second message using said key for encoding to generate a second 
20 encoded message; and 

decoding said second encoded message using said key for decoding. 

3. A method as in claim 1, comprising 

transmitting fix)m said server to said receiver a key for encoding a response; 
encoding a response using said key for encoding to generate an encoded 

25 response; 

transmitting said encoded response to said sender; 

transmitting from said server to said sender a key for decoding said encoded 

response; and 

decoding said encoded response at said sender. 

30 4 . A method as in claim 1, compridng transmitting from said server to 

said sender a signal representing whether said biometric data for said receiving person was 
verified at said server. 

5 . A method as in claim 1, wherein said key for encoding said message and 
. said key for decoding said encoded message are paired keys in a public key system. 
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6. A method as in claim 1, wheiein said key for encoding said message and 
said key for decoding said encoded message ate substantially identical. 



7. A method as in claun 1, wherdn said biometric data for said receiving 
person represents at least a portion of 
5 a facial image, 

a fingerprint, 
a hand image, 
a handprint^ 
a foot image, 
10 a footprint, 

a human genome, 
a retinal image, 
a voiceprint, or 

a record of a spoken statement 

15 8. A method as in claim 1, wherein said biometric data for said receiving 

person represents a receiver's signature, 

9. A method as in claim 1, wherein said step of verifying said biometric 
data for said receiving person comprises 

receiving a set of template biometric data from said sender; 
20 receiving said biometric data for said receiving person; and 

comparing said biometric data for said receiving person against said set 
of template biometric data from said sender. 



10. A syst^ for communication between a sender and a receiver, said 
system comprising 

25 an input device coupled to said sender, said input device disposed for receiving a 

set of biometric data for a sending person; 

a server, said server coupled to said sender and to said receiver, said server 
comprising a biometric data v^ifier and a generator of a key for encoding and a key for 
decoding; 

30 means, at said sender, for encoding a message using said key for encoding, 

to generate an encoded message; 

a communication path between said sender and said receiver; 

an input device coupled to said receiver, said input device disposed for receiving 
a set of biometric data for a receiving person; 
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means, at said receiver, for decoding said encoded message using said key for 



11. A system as in claim 10, comprising 

means, at said sender, for encoding a second message using said key for 
5 encoding to gen^ate a second encoded message; and 

means, at said receiver, for decoding said second encoded message using 
said key for decoding. 

12. A system as in claim 10, comprising 

means, at said receiver, for encodiag a response using said key for encoding to 
1 0 generate an encoded response; and 

means, at said sender, for decoding said encoded response. 

13. A system as in claim 10, comprising means, at said server, for 
transmitdng to said sender a signal representing whether said biometric data for said receiving 
person was verified. 

15 14. A system as in claim 10, wherein said key for encoding and said key 

for decoding are paired keys in a public key system. 

15. A system as in claim 10, wherein said key for encoding and said key 
for decoding are substantially identical. 

16. A system as in claim 10, wherein said biometric data for said 
20 recdving person represents at least a portion of 

a facial image, 

a fingerprint, 

a hand image, 

a handprint, 
25 a foot image, 

a footprint, 

a human genome, 

a retinal image, 

a voicepnnt, or 
30 a record of a spoten statement 
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17. A system as in claim 10, wheiein said biometiic data for said receiving 
person represents a receiver's signature. 

18. A system as in claim 10, wherein said biometric data verifier comprises 
a set of template biometiic data from a person whose biometiic data is to be verified; and 

means for comparing biometric data for said person against said set of 
template biometric data. 
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